Harmony Endpoint Forensics Analysis: Remediation

REMEDIATION POLICY

ANDRE: 5cab59e9-1de3-4865-9558-eac274cba3ad

Remediation:

Enabled: Incident remediation is enabled by policy for Endpoint File Reputation with confidence (High).

Malicious:

Terminate and Quarantine

Suspicious:

Terminate and Quarantine

Unknown:

Terminate and Quarantine

Trusted:

Terminate

REMEDIATION DETAILS

ANDRE: 5cab59e9-1de3-4865-9558-eac274cba3ad

This section describes all the remediation actions that were taken.

Already Deleted Files: 2 deleted

These are files that were already deleted before the analysis completed.

Search:

Reputation	File Name	File Path	MD5	Status
	appinstaller 11.6.exe	c:\users\ieuser\desktop\malware\appinstaller 11.6.exe	bc4915dd472d41ab5aa5bb7d64a6be86
	sample (7).zip	c:\users\ieuser\desktop\malware\sample (7).zip	9b47a59a655160347ce311e3baa03c93

Quarantined Files: 1 quarantined

These are files that have been quarantined by HEP.